1. Data we collect
- Registration: legal name, trade name, company ID (CNPJ), company email, user name, user email and password (stored hashed).
- Checkout: payer name, CPF/CNPJ, email and phone, when provided to generate the Pix charge.
- Payment: amount, status, gateway charge identifiers, creation and confirmation dates.
- Payouts: the Pix key provided for receiving funds (stored encrypted).
- Technical: IP address, user-agent, access and audit logs, request identifiers.
2. Purposes
- Processing Pix charges and confirming payments.
- Operating balance, financial ledger and payouts.
- Authenticating users and protecting accounts.
- Preventing fraud and abuse, and meeting legal obligations.
- Communicating operational platform updates.
5. Security
- Encryption in transit (HTTPS/TLS) across all domains.
- Sensitive credentials and payout Pix keys encrypted at rest (AES-256-GCM).
- Per-company data isolation (multi-tenant) and audit trails.
- Automated backups with controlled retention.
6. Retention
We keep transaction data for as long as required by legal, accounting and fraud-prevention obligations. Account data is kept while the account is active.
7. Your rights (LGPD)
Under Brazilian Law No. 13,709/2018 (LGPD), you may request confirmation of processing, access, correction, anonymization, portability, deletion of unnecessary data and information about sharing. Contact us at the email below to exercise your rights.
8. Contact
Privacy requests: atendimento@hyperpag.com. We will respond as quickly as possible.
Questions about this document: atendimento@hyperpag.com